This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/715C479841DD11F08CCC0259C4F9AE02.roa
File: 715C479841DD11F08CCC0259C4F9AE02.roa (raw, json)
Hash identifier: PhuNUYKM0kCgELYRDtpFqtUScEso5qA9zbEwuufi2/w=
Subject key identifier: 13:5E:49:FB:83:89:91:03:DC:D2:74:CC:A7:58:CF:6D:6E:5E:DA:4F
Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Certificate serial: 0220
Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/715C479841DD11F08CCC0259C4F9AE02.roa
Signing time: Thu 27 Nov 2025 00:47:46 +0000
ROA not before: Thu 27 Nov 2025 00:47:46 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141410
IP address blocks: 103.158.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl
rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08
Validity
Not Before: Nov 27 00:47:46 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69279fb2-dfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:9a:52:bb:b3:f0:2f:99:b3:62:e2:19:76:
56:4f:f7:34:7d:a2:64:8c:d5:d8:dc:d6:b4:93:54:
ac:ac:3c:2b:5c:b4:ee:cd:49:e4:9d:6e:7f:2f:17:
8e:70:c7:31:f0:53:a4:91:23:7c:1a:a0:bb:00:29:
d1:d7:38:80:38:28:60:2f:fd:a0:87:90:ee:dd:c5:
5e:16:a9:85:ca:ea:9a:55:ee:23:2e:da:21:73:59:
b1:ab:3f:eb:08:56:31:fc:25:38:ef:0b:c9:88:12:
46:d5:db:ad:c9:a3:3f:37:d4:17:f4:9b:0a:4c:12:
f9:d0:e1:7d:0b:40:08:af:18:58:d4:37:35:2a:65:
9a:b2:6d:00:bc:05:70:4e:0b:06:cd:ef:6b:c3:85:
12:aa:a6:79:c6:6e:24:17:0e:05:cf:1d:3c:35:42:
64:b5:19:11:15:61:3d:e8:31:66:65:1d:d2:94:d2:
27:c9:57:e1:4a:2e:2b:4c:73:a6:70:93:fe:62:61:
5b:f1:81:ff:94:aa:6b:bf:ac:75:3d:1a:6e:60:79:
0b:30:66:64:a3:84:1c:3b:09:b1:92:d5:85:b7:88:
69:8b:50:7a:fd:b7:59:41:d0:77:ea:8a:74:92:68:
23:a3:7d:09:eb:6f:87:84:f8:2c:ef:3d:06:9f:8e:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5E:49:FB:83:89:91:03:DC:D2:74:CC:A7:58:CF:6D:6E:5E:DA:4F
X509v3 Authority Key Identifier:
keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/715C479841DD11F08CCC0259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.110.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a6:98:a5:2a:03:3c:e0:bc:63:37:b3:7b:e1:ea:9f:21:6f:
26:3b:31:24:4a:a2:91:55:22:c2:2b:3e:0c:a7:25:d7:15:dc:
98:10:d1:15:10:3e:29:fb:d9:20:a2:50:a9:d5:83:14:f2:d0:
46:de:7c:ac:b4:ad:b2:2b:51:3b:18:dc:4a:17:49:31:bc:56:
9b:32:32:ba:d6:5e:d3:a8:cf:66:55:16:fe:31:18:bb:42:bb:
98:ed:4b:e7:4a:37:6d:e3:b4:45:8b:1c:11:e8:6e:d5:61:ad:
dd:b6:37:4e:be:21:f9:5f:db:a6:1b:81:f9:91:74:5a:fd:fe:
68:29:34:f1:8f:f0:c6:eb:48:0c:47:9d:41:55:8f:70:31:14:
d9:cc:75:20:79:23:fe:9e:39:ac:12:99:8e:b0:74:19:a0:b4:
10:d2:9e:67:40:f4:09:0d:2d:bc:39:0e:56:ea:ed:93:44:ff:
90:64:54:e3:ff:8c:69:e6:a7:84:89:e7:c2:8b:b0:c9:d0:d8:
85:e4:33:7a:8c:aa:53:bc:db:3c:fa:81:83:fc:be:9e:1e:ec:
dd:7d:75:00:a9:e3:ce:75:58:f2:65:69:f3:64:23:fe:ce:b3:
62:4f:94:1e:0c:7a:d5:23:c4:57:c2:8b:ca:e0:7b:76:14:27:
d2:b7:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:12:01 2025 by rpki-client